Skip to content

chore(deps): bump github.com/VirusTotal/yara-x/go from 1.19.0 to 1.20.0 in the gomod group - #1685

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/gomod-e03d3784c0
Open

chore(deps): bump github.com/VirusTotal/yara-x/go from 1.19.0 to 1.20.0 in the gomod group#1685
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/gomod-e03d3784c0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 28, 2026

Copy link
Copy Markdown
Contributor

Bumps the gomod group with 1 update: github.com/VirusTotal/yara-x/go.

Updates github.com/VirusTotal/yara-x/go from 1.19.0 to 1.20.0

Release notes

Sourced from github.com/VirusTotal/yara-x/go's releases.

v1.20.0

  • Implement SIMD-accelerated masked literal matching (#691).
  • Improve atom extraction heuristics for better performance (#690, 1e14f60).
  • Improve scan performance by applying file size and file header constraints only to regular expressions (#741).
  • Serialize Aho-Corasick automata directly with compiled rules for faster deserialization (3c61ef8).
  • Add --ignore-invalid-rules CLI option to skip rules that fail to compile (#704).
  • Expose ignore_invalid_rules in Python API (#711).
  • Add type annotations to match and return data in Python API (#692).
  • Add yrx_scanner_max_matches_per_pattern to C API and Scanner.MaxMatchedPerPattern to Go API (a33fa8e).
  • Add rlib crate types to yara-x-capi and yara-x-py to allow linking into wrapper crates (3c411d8).
  • Implement experimental msi, vba, and olecf modules (#709, 35e16ef).
  • Parse ShellItems and malformed sections in lnk module (#722).
  • Raise warning when patterns are unintendedly included in a set (#729).
  • Improve code completion in language server by distinguishing enums from other fields (a59e311).
  • Improve playground usability and add light/dark theme support (#701, #707, #731, 15f4984).
  • BUGFIX: Prevent panics and provide clear error message for regular expressions exceeding size limits (89df3f7).
  • BUGFIX: Prevent panic when filesize is compared to float values (328dcb3).
  • BUGFIX: Allow Teddy pattern matching algorithm to propagate early termination and respect timeouts (9d62d72).
  • BUGFIX: Correctly anchor patterns in of expressions with explicit offsets (439d642).
  • BUGFIX: Properly report compile error when exceeding maximum local variables limit (af53582).
  • BUGFIX: Escape special control characters in JSON and YAML serialization (#696).
  • BUGFIX: Do not ignore private modifier on hex and regular expression patterns (#698).
  • BUGFIX: Cap ZIP buffer pre-allocation to compressed size (#702).
  • BUGFIX: Robustly encode 64-bit string handles for WASM (#710).
  • BUGFIX: Align completions with default formatting in language server (#713).
  • BUGFIX: Fix accuracy issues when computing profiling time spent on each rule (6364574).
  • BUGFIX: Prevent naming conflicts in Python bindings by setting module name explicitly to yara_x (95fc833, 54435ac).
  • BUGFIX: Add protection against null pointers in C API (bf95890).

Contributors: @​1ndahous3 @​kevinmuoz @​malvidin @​MichaelTheSynthCat @​paul-atx @​saguywalker @​tlansec @​wxsBSD @​zdiff

Commits
  • 60ad069 chore: bump version to 1.20.0.
  • ce67892 tests: fix test case broken after disabling experimental modules.
  • 529a207 perf: apply file size and file header constraints only to regular expressions...
  • 35e16ef chore: disable modules msi, vba and olecf as they are still experimental.
  • 396b8c3 ci: allow publishing to VS Marketplace to fail gracefully
  • 7fd65d9 ci: publish the language server to Open VSX registry.
  • a1f4e54 chore: bump minimum Go version to 1.26 (#739)
  • e389dda ci: update GitHub Action versions (#740)
  • 95fc833 fix: explicitly set Python module name to yara_x
  • 1429bfd docs: fix warnings while running cargo doc.
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the gomod group with 1 update: [github.com/VirusTotal/yara-x/go](https://github.com/VirusTotal/yara-x).


Updates `github.com/VirusTotal/yara-x/go` from 1.19.0 to 1.20.0
- [Release notes](https://github.com/VirusTotal/yara-x/releases)
- [Commits](VirusTotal/yara-x@v1.19.0...v1.20.0)

---
updated-dependencies:
- dependency-name: github.com/VirusTotal/yara-x/go
  dependency-version: 1.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Aug 28, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants